Extracted

• • Target
    71695d69e1db1f27ae1e2966356557d8.exe
  • Size 392KB
  • SHA256 01cbbf38d827f502493dfd10b400602b52e094e77a30f0b4c68629d64f411a0e
  • MD5 71695d69e1db1f27ae1e2966356557d8
  • SHA1 8369c212110e03203cb3d5988e992c9aa413c3a4
  • SHA512 5bbe125de6e5e72ce90f5315e8c8dec099c098631773ef7a9e5c3455007b2f798a4b86dc8203a35770ef93c5b830e7b32ca5849e1c6c973d68c5e6be28d80d94
  • SSDEEP 6144:mMBPIL+j6OAWzbw5GsxfMlelMwwJ0CN3Bsim4eb4Klr:zBwaj6O1zbw7xEA5wiCZBTm4eb4KV
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedozdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2